What do Yahoo!, the Democratic National Committee, and Netflix all have in common? Over the last several months, these organizations have each been a victim of systematic cyberattacks, resulting in the data breach of millions of personal records and emails as well as the disruption of business activities and service. So, what has been identified as the major threat to an organization’s cybersecurity? The answer: YOU.

Most of us have likely experienced some level of data security breach, whether personally or professionally. And, a recent press release from the Identity Management Institute confirmed that “over 90% of cyber attacks are successfully executed with information stolen from employees who unwittingly give away their system ID and access credentials to hackers.”

Unfortunately, human error will always be a major cause for an organization’s data breach, but it is important that we all continue to stay abreast of the latest trends in information technology and data security. As such, the team at Kelly Communications Systems recently gathered with other experts in the field at NYC Cybersecurity Summit, presented by Gigamon, a company that enables stronger security and superior performance for enterprise, government and service provider networks. The team at Kelly Communications Systems wanted an inside look at the issues facing CISOs, CIOs, CTOs, and CEOs today, in order to deliver that intelligence to our clients.

Decoding Kevin Mitnick: The World’s Most Famous Hacker

The summit featured several cybersecurity experts in a panel discussion, but the main attraction was a keynote by none other than Kevin Mitnick, aka “the World’s Most Famous Hacker.” At just 16 years old back in 1979, Mitnick gained unauthorized access to a computer network and copied their software, a crime for which he spent time in prison. A few years later he hacked into Pacific Bell voice mail computers, a warrant was issued for his arrest and he fled and became a fugitive for two and a half years, during which time he committed a wide array of hacking including computer and wire fraud. After a long pursuit, Mitnick was finally arrested by the FBI in 1995 and subsequently served five years in prison.

Fast forward to present day, he now runs the security firm Mitnick Security Consulting, LLC which analyzes companies’ security strengths and weaknesses and identifies potential threats and loopholes. In an ironic turn of events, Mitnick has also served as a security consultant to the FBI, as well as to several Fortune 500 companies. He’s also an author and a public speaker…lucky us!

Hackers Use Social Engineering to Attack Their Prey

What did we take away from our opportunity to hear Kevin Mitnick? Well, we obviously learned that the biggest threat to an organization’s data security is its people. Hackers are increasingly focusing on clever ways to trick unsuspecting employees and individuals into divulging important confidential information. They prey on emotions by creating messages of fear or urgency that cause the victim to fall right into a well-planned trap. The tactics that cyber criminals use to steal data are diverse, but we’d like to mention some of the most common.

  • Malware is a broad terminology that includes any code with malicious intent, such as viruses, worms, and trojans. These things are usually passed on by opening attachments in emails, downloading software, and through weaknesses in operating systems. They then wreak havoc on a computer system, stealing loads of personal information and possibly destroying the computer.
  • Another popular tool used by hackers is phishing. This involves posing as a trusted third party, such as a bank, or even a fellow employee, in order to get employees to click a link. It then usually directs them to a fake site that prompts you to type in sensitive personal information, all of which will be stolen. Phishing is getting stronger and more sophisticated, and in some cases, the damage is already done after the user clicks the link and they don’t even have to type in any info.
  • Old school methods of malware and phishing have been around for a long time, but hackers are also evolving and targeting newer technologies. For instance, attackers are now using Dropbox links, Facebook Messenger links, even text messaging. The more technologies we have and the more interconnected we all become, the more hacking attempts we are going to see, which is definitely not good for business.

We Can Help Keep You Protected!

People may be at the heart of today’s data breaches, but greater awareness and education is already helping to curb bad habits that expose organizations to attack. Unfortunately, hackers will not stop inventing new ways to get their hands on the data they desire. That’s why Kelly Communications Systems has placed an increased emphasis on data security and we have partnered with the best in the business to help your company navigate through the tricky waters of cybersecurity in an ever changing world. We’re eager to assess the unique challenges your company is facing today, and offer you the most modern and effective solutions.